GHSA-JPVF-6235-4RH8 vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-azure, linux-aws, linux-gcp, linux-qemu-melange, linux-vmware...

GHSA-5R3H-V82J-R7RR vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-azure, linux-aws, linux-gcp, linux-qemu-melange, linux-vmware...

GHSA-3886-873F-6XPF vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-azure, linux-aws, linux-gcp, linux-qemu-melange, linux-vmware...

CVE-2026-53220 vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-azure, linux-aws, linux-gcp, linux-qemu-melange, linux-vmware...

CVE-2026-53218 vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-azure, linux-aws, linux-gcp, linux-qemu-melange, linux-vmware...

CVE-2026-53205 vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-azure, linux-aws, linux-gcp, linux-qemu-melange, linux-vmware...

CVE-2026-53185 vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-azure, linux-aws, linux-gcp, linux-qemu-melange, linux-vmware...

CVE-2026-53147 vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-azure, linux-aws, linux-gcp, linux-qemu-melange, linux-vmware...

CVE-2026-53146 vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-azure, linux-aws, linux-gcp, linux-qemu-melange, linux-vmware...

GHSA-CM56-MVX6-66QM vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-azure, linux-aws, linux-gcp, linux-qemu-melange, linux-vmware...

ROS-20260708-73-0003

The vulnerability of the PostgreSQL database management system is related to integer overflow. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

AMD Client UEFI Firmware Security Update

AMD has informed HP of a potential security vulnerability identified in some AMD client platform firmware, which might allow arbitrary code execution. AMD is releasing firmware updates to mitigate this vulnerability. AMD has released updates to mitigate the potential vulnerability. HP has...

Adalo Database API Enables Cross-App User Data Extraction via Over-Fetching and Missing Authorization Controls

Overview Adalo’s no‑code application platform exposes complete user records through its database API for all applications built on both V1 and V2. Due to a platform-level flaw, authenticated users can retrieve full user data belonging to any Adalo application, regardless of configuration. This...

Foxit PDF Reader < 2026.1.2 Multiple Vulnerabilities

According to its version, the Foxit PDF Reader application previously named Foxit Reader installed on the remote Windows host is prior to 2026.1.2. It is, therefore affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on the application'...

PT-2026-56454

Name of the Vulnerable Software and Affected Versions Adalo versions 1 through 2 Description Attackers can extract complete user records and correlate user behavior across multiple applications through the enumeration of the dbId variable. This occurs because the platform lacks data minimization,...

ROS-20260708-73-0037

The vulnerability of the iconv function in the GNU C Library is related to an uncontrolled and exploitable condition. Exploiting this vulnerability could allow a malicious actor to cause service failures...

CVE-2026-14740

DBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting an initial SQL comment. The preparse method normalises SQL and removes comments. When the SQL starts with a comment line, the deletion of that line during normalisation led to an out-of-bounds read by one byt...

CVE-2026-14740

DBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting an initial SQL comment. The preparse method normalises SQL and removes comments. When the SQL starts with a comment line, the deletion of that line during normalisation led to an out-of-bounds read by one byt...

CVE-2026-14739

DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeholders. The fix for CVE-2026-10879 did not allocate enough memory to handle approximately 1.2-million placeholders. DBI version 1.650 sets a hard limit of 99,999 placeholders...

Apache HTTP Server: mod_proxy_ajp: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow

A flaw was found in modproxyajp of Apache HTTP Server. This heap-based buffer overflow vulnerability allows a remote attacker, by connecting to a malicious AJP Apache JServ Protocol server, to send a specially crafted message. This message can cause modproxyajp to write attacker-controlled data...